CVE-2016-4340

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-4340
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4340.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-4340
Downstream
Published
2017-01-23T21:59:01.487Z
Modified
2026-04-10T03:52:21.818830Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 through 8.2.4 allows remote authenticated users to "log in" as any other user via unspecified vectors.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
07140614ca47a39ac24c725298dd8ab9e9b6033f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bd5b485cc9ca492d7b8c928c3f502a0bd323d048
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c35f8be08ccbef2ff19c0e83b2bd698d834e8666
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
68302f5dea6d2f0cda399fbbbff15db11c6f09d0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1dc869e57e85459627299d099e3ff78df1379edd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a810cc509e54b71aff30dfb9ba52ea4aea587c32
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0b08410271bdcbdf39c22b90f0395573cc18d70f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6048fee64efc3e37c3e993a34d2661dc0e2fdb88
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ec6c77a974c52ec51da3b6c9804105efc4ec875
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cb00e11912b2827f780148b8b2644396ee9bd32e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4aa34f9d674f351dec05f6e3ef4de8a962fc0dd9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c00a88f9d7045507c41c1dda956a2e9dd8ea4173
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a782b322ba83e6bfc172abdc8098b0dbfdd4d64
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
08e1b9c6cb50fa9d8ca66e413aad257e966af8a8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5b5777b8cf3328d27ef549c31f70993da1d1b267
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2ff6e3e54b74a697d46a985dca6ae86d86fea095
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d2b32ff70d8e4328022b882f27397adf28bc0a88
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f41dfa1f137dc2fbc8ed95e94178ec9521e26dff
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
47eee27f44d06f02931b2624b3c248ef35281b84
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0b7b6cd4df6bd30c499a03115f46bf839f9b2dda
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9ecea0c4efa3ce749da8dfc6836a24597fe31b9d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
88f49ec8c83f5e5b766090291f38293f121e7c0c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ff934b36ec5cfaf11f388251e538ecaf32ef58c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
60b623a4069189858210b4dfad96d46509bcd311
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6aacc380f5896faccc8efb4873fca02b5c017ea6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b82d9f2119ab6d8da4be9424917b28edbe96cccc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0743fdf67f65cd5d23b092e5e45d3811e608cb77
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c7dc43257169e801379ac89bc8de5e34d33c66f8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
699b4cafaddcce5064a09a3edde9fb8ebb5ba82c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ace83da1f34b3f973e6ea50b33c68e572ceb00bf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a7a325a0fd2d44a10e20061a4712b2a7eb8525a7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ca80fd6020c8b7d8694cf5a8e79a214d0022ebca
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cd3f57ebdba7f3a5735dbb99186070fdf9e30e0f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f9ceb84a5999c03226037469c27e9dd210ffbec3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ee438ba622a822c2ebb179266b656b7fbd687f46
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f5b0299028c8250cef1ae1b66e088a577b9aa526
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
14ad7803a5cf70e2777ac4d9ce2e33da6eb312ab
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8528b41e42563ba9da5b1a4ab447a9a17fe0bdb1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f359b80023f0bbe03c07d2591132b189af38c1e3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
82b781c32d06f4b812e219de5e3652806c734607
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
555fba4c64c5e7a38942a6855b66018e85bd2b27
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4df2ca3292e7f9a983faebfdaa149601f617de7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
67201a1591e4aa5226ec7e4fb2bd3c152196a450
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1a8944dc43fe3a07fe9b3094b3f1259d8aacebdd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
666051c947d1c7797c8d06e91abe559e88842350
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.0"
        }
    ]
}

Affected versions

v1.*
v1.2.0
v1.2.0pre
v1.2.1
v1.2.2
v2.*
v2.3.0
v2.3.0pre
v2.3.1
v2.4.0
v2.4.0pre
v2.4.1
v2.5.0
v2.6.0
v2.6.0pre
v2.6.1
v2.6.2
v2.6.3
v2.7.0
v2.7.0pre
v2.8.0
v2.8.0pre
v2.8.1
v2.8.2
v2.9.0
v2.9.1
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.1.0
v4.*
v4.0.0
v4.0.0rc1
v4.0.0rc2
v5.*
v5.0.0
v5.1.0
v5.2.0
v6.*
v6.0.0-ee
v6.0.0-ee.beta
v6.0.0-ee.rc1
v6.1.0-ee
v6.3.0-ee
v6.3.1-ee
v6.4.0-ee
v6.5.0-ee
v6.6.0-ee
v6.7.0-ee
v6.7.0.rc1-ee
v6.8.0-ee
v7.*
v7.0.0-ee
v7.1.0-ee
v7.1.0.rc1-ee
v7.2.0.rc1-ee
v7.2.0.rc2-ee
v7.2.0.rc3-ee
v7.2.0.rc4-ee
v7.2.0.rc5-ee
v7.3.0-ee
v7.3.0.rc1-ee
v8.*
v8.2.0-ee
v8.2.0.rc1-ee
v8.2.0.rc2-ee
v8.2.1-ee
v8.2.2-ee
v8.2.3-ee
v8.2.4-ee
v8.3.0-ee
v8.3.0.rc1-ee
v8.3.0.rc2-ee
v8.3.0.rc3-ee
v8.3.1-ee
v8.3.2-ee
v8.3.3-ee
v8.3.4-ee
v8.3.5-ee
v8.3.6-ee
v8.3.7-ee
v8.3.8-ee
v8.4.0-ee
v8.4.0-rc2-ee
v8.4.0-rc3-ee
v8.4.0.rc1-ee
v8.4.1-ee
v8.4.2-ee
v8.4.3-ee
v8.4.4-ee
v8.4.5-ee
v8.4.6-ee
v8.4.7-ee
v8.4.8-ee
v8.4.9-ee
v8.5.0-ee
v8.5.0-rc1-ee
v8.5.0-rc2-ee
v8.5.0-rc3-ee
v8.5.0-rc4-ee
v8.5.1-ee
v8.5.1.DBee
v8.5.10-ee
v8.5.11-ee
v8.5.2-ee
v8.5.3-ee
v8.5.4-ee
v8.5.5-ee
v8.5.5-rc1-ee
v8.5.6-ee
v8.5.7-ee
v8.5.8-ee
v8.5.9-ee
v8.6.0-ee
v8.6.0-rc1-ee
v8.6.0-rc2-ee
v8.6.0-rc3-ee
v8.6.0-rc4-ee
v8.6.0-rc5-ee
v8.6.1-ee
v8.6.2-ee
v8.6.3-ee
v8.6.4-ee
v8.6.5-ee
v8.6.6-ee
v8.6.7-ee
v8.7.0-ee
v8.7.0-rc4-ee
v8.7.0-rc5-ee
v8.7.0-rc6-ee
v8.7.0-rc7-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4340.json"